gdssecurity Goto Github PK

add-trusted-certificate-to-ios-simulator

Script for easily importing a trusted CA certificate into the iOS Simulator's trust store. This provides application testers the ability to intercept SSL traffic when using the simulator for testing.

anti-csrf-library

This library was co-developed with a leading financial institution in order to build a single solution for Cross-Site Request Forgery (CSRF) prevention that is flexible enough to deploy firm-wide within diverse Java/J2EE web application environments.

antixss-for-java

AntiXSS for Java is a port of the Microsoft Anti-Cross Site Scripting (AntiXSS) v1.5 library for .NET applications. The library requires Java 1.4 or higher, but has no other prerequisites.

blazentoo

Blazentoo is an Adobe AIR application that can be used to exploit insecure Adobe BlazeDS and LiveCycle Data Services ES servers. Blazentoo provides the ability to seamlessly browse web content, abusing insecurely configured Proxy Services.

burpee

Python object interface to requests/responses recorded by Burp Suite

cloud-and-control

code-from-o-reilly-network-security-tools

Tools developed for the book Network Security Tools: Writing, Hacking, and Modifying Security Tools (Published April 2005 by O'Reilly - ISBN 0-596-00794-9). These examples, along with the rest of the examples from the book, are also available from O'Reilly.

convert2fpr

Utility for converting Findbugs, ESLint and PMD XML results into HP Fortify FPRs

csaw_2010

Source code to the Crypto Challenges for the CSAW 2010 qualifying CTF

deflate-burp-plugin

The Deflate Burp Plugin is a plug-in for Burp Proxy (it implements the IBurpExtender interface) that decompresses HTTP response content in the ZLIB (RFC1950) and DEFLATE (RFC1951) compression formats.

dotnet-mvc-enumerator

fusionpbx

Official FusionPBX - A full-featured domain based multi-tenant PBX and voice switch for FreeSwitch.

gds-pmd-security-rules

Custom security ruleset for the popular Java static analysis tool PMD.

gwt-penetration-testing-toolset

A set of tools made to assist in penetration testing GWT applications. Additional details about these tools can be found on my OWASP Appsec DC slides available here: http://www.owasp.org/images/7/77/Attacking_Google_Web_Toolkit.ppt

jetleak-testing-script

Script to test if a server is vulnerable to the JetLeak vulnerability

jsse_fortify_sca_rules

Custom Fortify SCA rules to detect common JSSE certification validation flaws

mangers-oracle

Demonstration of Manger's Oracle, attacking RSA OAEP

mimegusta

Configurable content-sniffing XSS test bed

osx-continuity-dialer-poc

paddingoracledemos

presentations

This repository contains slide decks and other materials for talks and research presented at various conferences.

psattack

A portable console aimed at making pentesting with PowerShell a little easier.

scala-findbugs-sample

Sample Findbugs custom detector for finding potentially insecure Scala code.

sentrygun

Rogue AP killer

sentrygun-server

sol-function-profiler

Solidity Contract Function Profiler

sqlbrute

SQLBrute is a tool for brute forcing data out of databases using blind SQL injection vulnerabilities.

sslscan

sslscan tests SSL/TLS enabled services to discover supported cipher suites

sslsecuritychecker

IronWASP module to test security of SSL services. Ported from http://www.bolet.org/TestSSLServer/

substratedemo

ListLock APK contains the demo APK for the Using Mobile Substrate With Android Applications blog post